529a7c05f6c85c1211eb77f9f7512593 | Triage

Sharing

General

Target

529a7c05f6c85c1211eb77f9f7512593
Size

260KB
MD5

529a7c05f6c85c1211eb77f9f7512593
SHA1

a6e327b7fb04fbf9dc4ee0a98e1532c6c763564f
SHA256

e93ee1567966fa65ee39adef763a2437c56b9421cd461808b3ba96ac0f10165d
SHA512

c87b228085a36d25c6847701e4424828001f64deadf4fbbf75a2b45bb86a3f5f4b92e26d97ac105652aac77569315d3874567f6d6fd0a5f859de5ebd5e07f428
SSDEEP

6144:qRrMY2w73akS8awfpAFA3w8z2D+hadOCs//O9NnDpr0JaYNb:a4+pag2D+hadJs/GrnDKJNb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
529a7c05f6c85c1211eb77f9f7512593

Files

529a7c05f6c85c1211eb77f9f7512593
.exe windows:4 windows x86 arch:x86

462ae67ee906f26238f23ccccf421392

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FormatMessageA
GetEnvironmentStringsW
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
IsDebuggerPresent
LoadLibraryA
VirtualAlloc
VirtualFree
lstrcatA
lstrcpynA

user32

BeginPaint
DestroyMenu
DestroyWindow
GetActiveWindow
GetKeyState
GetWindowThreadProcessId
RegisterClassA
ShowWindow
UnregisterClassA
UpdateWindow

gdi32

DeleteEnhMetaFile
GetDIBColorTable
GetTextExtentPoint32A
SetBkColor
SetEnhMetaFileBits

shell32

DoEnvironmentSubstW
DragFinish
ExtractIconA
SHAppBarMessage
SHBrowseForFolderA
SHCreateDirectoryExA
SHGetFolderLocation
SHGetSettings
SHGetSpecialFolderPathA
ShellExecuteExW
ShellExecuteW
Shell_NotifyIconA
Shell_NotifyIconW

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ